IBM Engineering Requirements Management DOORS Next Denial-of-Service Vulnerability via Uncontrolled Recursion

A denial-of-service vulnerability has been identified in IBM Engineering Requirements Management DOORS Next versions 7.0.2, 7.0.3, and 7.1. This vulnerability allows an authenticated user to cause a service disruption by uploading specially crafted files that exploit uncontrolled recursion.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users of IBM Engineering Requirements Management DOORS Next 7.0.2 should install iFix 36. Users of version 7.0.3 should install iFix 19 or newer. For version 7.1.0, iFix 05 or newer should be installed.